Subprocessors
HyperProxy uses the following third parties to provide the managed service. Each processes only the data needed for its function, under its own security commitments and our agreements with it.
Infrastructure and operations
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Railway Corp. | Hosting of the gateway, dashboard, PostgreSQL, and Redis | All service data at rest and in transit | United States (US West) |
| Cloudflare, Inc. | DNS, TLS termination, edge protection, Turnstile bot checks | Connection metadata, IP addresses | Global edge network |
| Resend, Inc. | Transactional email (verification, recovery, alerts) | Email address, message content | United States |
| Sentry (Functional Software, Inc.) | Error monitoring of the platform | Stack traces and route names; no bodies, headers, cookies, or user data | United States / EU |
Payments and identity
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Paddle.com Market Ltd. | Merchant of record: checkout, tax, invoices, refunds, subscriptions | Billing name, address, payment instrument (never seen by HyperProxy) | United Kingdom / United States |
| Google LLC | Optional Google sign-in; website analytics only with your consent | Google account email for sign-in; consented website usage data | United States |
| Apple Inc. | App Attest and DeviceCheck verification when you enable them | Attestation objects and device tokens | United States |
AI providers you configure
The gateway forwards your requests to the AI providers you add (OpenAI, Anthropic, Google, Mistral, and others) under your own keys and your own agreements with them. They are your processors, not ours; HyperProxy transmits the request and does not retain its body.
Changes
We update this page before adding a subprocessor that handles customer data. Email [email protected] to be notified of changes. See also the Data Processing Addendum and Privacy Policy.